Skip to content
OpenAdvisories

Vendor

veraPDF

7 known vulnerabilities.

Products

veraPDF-validation 3 veraPDF-parser 2 veraPDF-library 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-54081

    veraPDF Parser DoS via PostScript Type 1 Font Programs

    veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf…

    veraPDF veraPDF-parser org.verapdf:parser Maven
  • Medium 6.9
    CVE-2026-54080

    veraPDF Parser DoS via PostScript CMap Streams

    veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/cmap/CMapParser.java and veraPDF-parser/src/main/java/org/verapdf/parser…

    veraPDF veraPDF-parser org.verapdf:parser Maven
  • Medium 6.5
    CVE-2026-54082

    veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

    veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate(...) and GFPDAcroForm.getdynamicRender(), where de…

    veraPDF veraPDF-validation org.verapdf:validation-model-jakarta org.verapdf:validation-model Maven